IN

insomnia

Known ransomware group ACTIVE
Currently active

Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.

1

Total Claims

1

Critical

Records Claimed

1

Industries Hit

Active span: Aug 24, 2026 – Aug 24, 2026 · 1 organizations targeted

Currently active
Activity 1.9 Severity 10.0 Sectors 2.3 Tooling 0.0

Actor Threat Profile

Activity Timeline

Peak: Aug 2026 (1)
Aug 2026
LessMore
Aug 2026

Share this profile

Shareable intel card for insomnia

Top Targeted Industries

Healthcare 1

Tradecraft & Infrastructure

0

Documented tools

0 / 0

MITRE tactics / techniques

1

Known leak sites

Full intelligence profile on ransomware.live →

Claims by insomnia

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.